This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft File: Zrds5_7vaVb437n4vDoiiGG5ny4.mft (raw, json) Hash identifier: zPry0JniHgqov1C9tCTkyWsgpx6kIk4+ayzXGlEfFeo= Subject key identifier: 72:B1:AF:30:3C:E9:47:83:20:51:6B:F3:0D:E4:F7:FF:BF:E9:D7:92 Authority key identifier: 66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E Certificate issuer: /CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e Certificate serial: 019BFA400989F5B50D5764089D430E3D9705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 12:20:59 +0000 Manifest this update: Mon 26 Jan 2026 12:20:59 +0000 Manifest next update: Tue 27 Jan 2026 12:20:59 +0000 Files and hashes: 1: DneugekopIxK304C8pLImv6Qcv0.roa (hash: +cGEhJmcpfO0fbmJYvL9sDH0f2ClBmDUFG+o22CeZUs=) 2: Zrds5_7vaVb437n4vDoiiGG5ny4.crl (hash: H3IqyrfjjBg8igfsuZQP2NVFOB7SLI4z/apV7pB6DbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:40:09:89:f5:b5:0d:57:64:08:9d:43:0e:3d:97:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e Validity Not Before: Jan 26 12:20:59 2026 GMT Not After : Jan 27 12:20:59 2026 GMT Subject: CN=72b1af303ce9478320516bf30de4f7ffbfe9d792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b0:2b:22:84:67:9a:87:3d:3e:9a:ad:66:58: 9b:7f:48:48:34:cf:af:fc:d7:90:f9:e8:95:a7:2a: a1:2b:fe:f4:d4:8b:5f:21:08:a4:3b:3c:1d:2f:87: c6:ac:17:bc:25:e4:d8:79:21:1b:37:0a:aa:b2:e1: d9:fa:72:e8:42:c4:6d:7c:ae:6f:6c:c5:4f:5d:3d: df:99:30:f5:06:d2:95:fa:e3:37:cb:b8:8b:9c:26: 27:89:4f:57:96:8a:ad:66:3b:77:fe:94:ef:bc:29: 56:9b:60:7f:c7:fc:f5:c6:96:1a:93:49:95:19:81: bc:ad:1c:86:4b:e6:78:bc:69:f9:57:54:92:41:0a: 1a:4d:de:58:54:75:38:15:c1:2b:dc:ed:a1:16:04: 76:92:1b:0a:aa:51:40:5a:8c:ba:94:0b:4e:08:ca: 01:ef:3d:9e:6a:3f:1d:27:dd:cd:9a:29:40:49:12: 5e:d2:88:98:2b:bd:aa:06:6c:79:ef:53:e9:8d:2e: d3:61:78:58:81:4b:5d:6f:2f:94:80:71:80:35:8e: 7c:3f:aa:ab:4c:8f:51:20:1c:73:95:6b:93:44:dd: 52:2e:a1:70:d2:5d:51:f6:a0:b4:8f:06:64:51:a7: 29:42:ad:f6:39:5e:69:d6:db:1f:c2:f7:b6:22:db: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B1:AF:30:3C:E9:47:83:20:51:6B:F3:0D:E4:F7:FF:BF:E9:D7:92 X509v3 Authority Key Identifier: keyid:66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:79:92:18:a2:84:23:db:f4:35:fd:eb:58:b7:db:2c:24:66: 40:e6:91:b0:74:4f:91:e9:56:5a:26:09:c9:9d:c8:6a:2d:97: c4:5a:ca:55:cf:b5:31:0e:c4:38:43:81:8f:c6:de:b0:ab:38: cc:80:10:e4:6c:b7:ec:d4:f4:b7:10:ab:72:21:e7:96:3a:6e: 12:1d:63:28:b6:1f:6a:05:4b:f0:30:77:36:3b:7e:26:ae:9b: c2:25:a9:e5:2b:17:07:5c:72:1e:41:ae:eb:de:b2:48:10:d9: 3d:f7:90:17:3c:c3:76:bf:a7:e9:53:d3:d0:1e:66:0a:12:c1: 49:f0:5c:ed:a2:12:a5:53:4a:af:21:2f:a2:a0:d0:ce:5b:a5: da:c1:65:38:fa:8d:4a:d6:cd:07:24:b0:87:1e:f9:2f:78:0d: 47:76:ed:ed:8e:ce:5f:d5:78:9a:f6:95:aa:ca:6b:5d:b6:c0: 7e:4f:db:08:c0:3f:9b:89:c7:d0:ca:c0:8e:a0:1e:1d:fc:84: 99:86:b3:14:90:44:1e:89:ec:ef:d4:e6:50:83:0b:c8:42:c0: a5:95:3e:c9:85:b8:16:93:4b:77:84:52:36:53:e6:34:6e:d9: b6:a7:d5:8b:c8:12:4e:80:3b:db:f5:fb:31:7b:72:3b:89:9f: a7:64:c9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6QAmJ9bUNV2QInUMOPZcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Yjc2Y2U3ZmVlZjY5NTZmOGRmYjlmOGJjM2EyMjg4NjFi OTlmMmUwHhcNMjYwMTI2MTIyMDU5WhcNMjYwMTI3MTIyMDU5WjAzMTEwLwYDVQQD Eyg3MmIxYWYzMDNjZTk0NzgzMjA1MTZiZjMwZGU0ZjdmZmJmZTlkNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rArIoRnmoc9PpqtZlibf0hINM+v /NeQ+eiVpyqhK/701ItfIQikOzwdL4fGrBe8JeTYeSEbNwqqsuHZ+nLoQsRtfK5v bMVPXT3fmTD1BtKV+uM3y7iLnCYniU9XloqtZjt3/pTvvClWm2B/x/z1xpYak0mV GYG8rRyGS+Z4vGn5V1SSQQoaTd5YVHU4FcEr3O2hFgR2khsKqlFAWoy6lAtOCMoB 7z2eaj8dJ93NmilASRJe0oiYK72qBmx571PpjS7TYXhYgUtdby+UgHGANY58P6qr TI9RIBxzlWuTRN1SLqFw0l1R9qC0jwZkUacpQq32OV5p1tsfwve2IttUEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKxrzA86UeDIFFr8w3k9/+/6deSMB8GA1UdIwQY MBaAFGa3bOf+72lW+N+5+Lw6IohhuZ8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnJkczVfN3ZhVmI0MzduNHZEb2lpR0c1bnk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9hNGNmMWItNGRiNi00YzNmLTk2OTQt YTA2ODY0ZWYwNjFjLzEvWnJkczVfN3ZhVmI0MzduNHZEb2lpR0c1bnk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9hNGNmMWItNGRiNi00YzNmLTk2OTQtYTA2ODY0ZWYwNjFj LzEvWnJkczVfN3ZhVmI0MzduNHZEb2lpR0c1bnk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHmSGKKE I9v0Nf3rWLfbLCRmQOaRsHRPkelWWiYJyZ3Iai2XxFrKVc+1MQ7EOEOBj8besKs4 zIAQ5Gy37NT0txCrciHnljpuEh1jKLYfagVL8DB3Njt+Jq6bwiWp5SsXB1xyHkGu 696ySBDZPfeQFzzDdr+n6VPT0B5mChLBSfBc7aISpVNKryEvoqDQzlul2sFlOPqN StbNBySwhx75L3gNR3bt7Y7OX9V4mvaVqsprXbbAfk/bCMA/m4nH0MrAjqAeHfyE mYazFJBEHons79TmUIMLyELApZU+yYW4FpNLd4RSNlPmNG7ZtqfVi8gSToA72/X7 MXtyO4mfp2TJ4g== -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:23 2026 by rpki-client